Bitcoin hardware wallets — Ledger, Trezor & Coldcard compared

What a hardware wallet actually does

Strip away the marketing and a hardware wallet does exactly two things that an app on your phone cannot match.

It stores the private key in a chip that is not your computer. The key — the 256-bit secret that authorises spending — is generated inside the device and never leaves it. It is not in your computer's RAM, not in a file on disk, not in any browser extension, not in any cloud backup. There is no API to read it out. The only way the key escapes is if someone physically extracts the chip and bypasses its protection — a class of attack that, for the modern devices listed below, requires nation-state lab equipment.

It signs transactions internally and shows you what you're signing on its own screen. When you want to send BTC, your computer prepares an unsigned transaction and passes it to the device. The device parses the destination address and amount, displays them on its own trusted screen, waits for you to physically press a button to confirm, signs internally, and returns the signed transaction. The host computer only ever sees the final signature. If malware on your laptop swaps the destination address before signing, you see the swap on the device's screen and refuse. That single feature — confirming the real address on hardware your computer cannot lie to you about — is the bulk of the security you are paying for.

Why software wallets and exchanges are not the same

A mobile wallet keeps the key on a phone. A modern phone is a competent secure element in its own right — but the key still touches an operating system that runs thousands of other apps, receives ad-network code over the wire daily, and is one zero-click iMessage exploit away from being silently rooted. For pocket money it is fine. For a meaningful stack it is not the right tool.

An exchange wallet does not even keep your key. It keeps an IOU. You hold a database row that the exchange promises to honour. That promise was honoured by Mt.Gox until 2014. By Celsius until 2022. By BlockFi until 2022. By Voyager until 2022. By FTX until — famously — November 2022. Every previous cycle has produced its own list of failed custodians. Hardware wallets exist because that pattern is older than Bitcoin and shows no sign of breaking.

The three big names

Out of dozens of devices on the market, three brands cover roughly the entire serious-user population. Each made a different set of trade-offs.

Ledger (Nano S Plus, Nano X, Stax)

The most-sold hardware wallet by a wide margin. Ledger pairs a certified secure-element chip (currently the ST33) with a custom operating system called BOLOS, and ships companion apps for desktop and mobile. Multi-asset support is the broadest in the industry — hundreds of coins and tokens, with first-class support for Ethereum and the major ecosystems alongside Bitcoin.

Two characteristics define Ledger's trade-offs. First, the firmware is closed-source: you cannot audit it. Second, in May 2023 the company announced Ledger Recover, an opt-in paid service that splits a user's seed into three encrypted shards held by three custodians, recoverable after KYC verification. The service is off by default and requires explicit consent, but the existence of a firmware update that can extract a seed forced a re-evaluation of what closed-source firmware actually means. For users whose threat model accepts that trust, Ledger remains a polished, well-supported product. For users whose threat model does not, it is the device they leave on the shelf.

Trezor (Model One, Safe 3, Safe 5)

Made by SatoshiLabs in Prague. The original Trezor (Model One, 2014) was the first hardware wallet ever sold and remains in production at the entry price point. The current flagship, the Safe 5, adds a colour touchscreen and a secure element.

The defining feature is that the firmware is fully open-source. Every line of code that decides whether your transaction signs is auditable on GitHub, and has been audited repeatedly by independent researchers. The earliest Trezor models did not have a secure element — the seed was protected only by the device's general-purpose microcontroller — which made them vulnerable to a 2020 physical-extraction attack by Kraken Security Labs against the Model One and Model T. Every current Trezor model (Safe 3 and Safe 5) ships with a secure element specifically to close that class of attack.

Coldcard (Mk4, Q)

Made by Coinkite in Toronto. The Bitcoin-only option, designed for people who want self-custody as a long-term storage layer rather than a daily-spending wallet. The firmware is open-source, the hardware ships with a secure element, and the workflow is built around air-gapping: instead of connecting to a computer over USB, the Coldcard can talk to a watch-only wallet via microSD card or QR codes (on the Q model). The signing device need never touch the network or the host machine at all.

That architecture is the strongest available defence against a compromised host: even if your laptop is fully owned by malware, the only thing it can ever send to the Coldcard is an unsigned transaction the Coldcard can refuse. The trade-off is the user experience — the Coldcard is the least friendly of the three for casual use, and the multi-asset support is intentionally limited to Bitcoin only.

Side-by-side comparison

The numbers below reflect the current product line as of May 2026. Pricing is the manufacturer's USD list price and excludes shipping and tax.

How to verify a device hasn't been tampered with

The biggest theft vector against hardware wallets is not the device itself — it is what reaches your door. Devices intercepted in shipping, sold on marketplaces with a pre-loaded seed, or "gifted" by a stranger have drained the funds of users who skipped this step. The checks below take about ten minutes and remove almost all of that risk.

1. Buy from the manufacturer or an explicitly listed authorised reseller. Never buy a hardware wallet on Amazon Marketplace, eBay, Facebook Marketplace, AliExpress or any used-goods platform. Never accept one as a gift from someone you don't trust completely. Pay the small premium for direct.
2. Inspect the tamper-evident packaging before opening. Trezor uses a holographic seal across the box. Ledger ships a box-in-box with a glued outer shell. Coldcard uses a numbered, opaque tamper bag — write down the number, then check it against the order confirmation. A broken seal, residue, or a number mismatch means the device must be returned unopened.
3. Install the official companion app from the official URL. ledger.com/start, trezor.io/start, coldcard.com. Never click an installer link from an email, a search ad or a forum post. Bookmark the real URL on a clean device and re-use the bookmark every time. Search-ad impersonation is one of the most common entry points to credential theft.
4. Run the genuine-device cryptographic check. Both Ledger Live and Trezor Suite perform a challenge-response check against the device's factory-installed signing key as part of first setup. Coldcard prints a unique number on the device that you check against an out-of-band reference. If the check fails, stop — do not load funds.
5. Generate the seed on the device itself. The device should walk you through generating a new 12 or 24-word seed during first boot and have you write each word down. If a "pre-initialised" device hands you a printed seed in the box, or asks you to type a recovery seed before generating one, it is compromised. Destroy it physically and contact the vendor.
6. Write the seed on paper or steel — never digital. No photos. No iCloud notes. No password manager. No text file. No "I'll just type it once to test recovery". Every digital copy is an attack surface. Paper is the minimum; a stamped steel plate (e.g. Cryptosteel, SeedPlate, Billfodl) survives fire and flood and is the standard for anything you care about long-term.
7. Optionally add a BIP39 passphrase (the 25th word). A passphrase is an arbitrary extra string you mix into the seed. The same 12 or 24 words combined with two different passphrases produce two completely different wallets. Without the passphrase, the seed alone reveals only a decoy. Losing the passphrase loses the funds — there is no recovery — so it has to live somewhere as robust as the seed itself.

What hardware wallets defend against — and what they don't

The strongest argument for a hardware wallet is also the most precise one: it eliminates a specific class of attack completely, while leaving others intact. Knowing which is which is the difference between false confidence and real security.

When you actually need one

A hardware wallet is a tool. Like any tool it is a poor fit when the job doesn't justify it, and essential when the job exceeds what cheaper tools can do safely. A useful threshold heuristic:

None of these thresholds are absolute — your threat model, jurisdiction and personal risk tolerance shift the lines. But the direction is consistent: as the stack grows, the case for moving custody off platforms you do not control grows with it.

The decision, simplified

If you are multi-asset and value polish, Ledger is the easiest on-ramp — accept that the trust model includes the company's closed-source firmware. If you insist on open-source firmware and want a clean, modern interface, the Trezor Safe 5 is the default recommendation. If you are Bitcoin-only and want the strongest available isolation, the Coldcard Mk4 (or the Q for QR-based air-gap) is the long-term storage layer of choice.

All three are credible. None of them protect you from a seed you never wrote down, from a transaction you blind-signed without checking, or from a stranger on Telegram claiming to be customer support. Hardware is one layer of the answer. The other layer is you.

FAQ